Microsoft Microsoft Certifications AZ-140 Questions & Answers

• Question 111:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.

  User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.

  You plan to shut down a session host named Host1 to perform routine maintenance.

  You need to prevent new user sessions to Host1 without disconnecting active user sessions.

  Solution: From the properties of the virtual machine of Host1, you enable just-in-time (JIT) VM access.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/drain-mode

• Question 112:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.

  User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.

  You plan to shut down a session host named Host1 to perform routine maintenance.

  You need to prevent new user sessions to Host1 without disconnecting active user sessions.

  Solution: From the host pool, you remove Host1 from the session host list.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/drain-mode

• Question 113:

  You have an Azure Virtual Desktop host pool in the US East Azure region.

  You need to ensure that the host pool can fail over to the US West Azure region.

  What should you do first?

  A. Create a Recovery Services vault.

  B. Create a virtual machine snapshot of each session host.

  C. Create an Azure Storage account that uses geo-redundant storage (GRS).

  D. Create a new host pool.

  Correct Answer: A

  You can configure replication for all your VMs in both pooled and personal host pools with Azure Site Recovery. For more information about how this process works, see Replicate Azure VMs to another Azure region https://learn.microsoft.com/en-us/azure/virtual-desktop/disaster-recovery#vm-replicationation

• Question 114:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.

  User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.

  You plan to shut down a session host named Host1 to perform routine maintenance.

  You need to prevent new user sessions to Host1 without disconnecting active user sessions.

  Solution: From the host pool, you change the Drain mode of Host1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/drain-mode

• Question 115:

  You have an Azure Virtual Desktop deployment.

  You use the Start/Stop VMs during off-hours feature in Azure.

  You need to configure which virtual machines must never be stopped by the solution.

  What should you configure?

  A. the Diagnostic settings of the host pool

  B. the Start-Stop-VM task

  C. an Azure Automation account variable

  D. an action group

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/automation/automation-solution-vm-management https://docs.microsoft.com/en-us/azure/automation/automation-solution-vm-management-enable

• Question 116:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have the following:

  1.

  A Microsoft 365 E5 tenant

  2.

  An on-premises Active Directory domain

  3.

  A hybrid Azure Active Directory (Azure AD) tenant

  4.

  An Azure Active Directory Domain Services (Azure AD DS) managed domain

  5.

  An Azure Virtual Desktop deployment

  The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.

  You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.

  Solution: You configure a compliance policy in Intune.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to configure a Configuration Profile in Intune or use Group Policy.

• Question 117:

  You have an Azure Virtual Desktop deployment.

  You deploy and configure Azure Virtual Desktop in a secondary location.

  You plan to perform a test failover to the secondary location, but discover existing user sessions to the primary location.

  You need to sign out users from the session hosts in the primary location.

  Which PowerShell cmdlet should you run?

  A. Invoke-RdsUserSessionLogoff

  B. Remove-AzWvdUserSession

  C. Invoke-RestMethod

  D. Remove-Alias

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/disaster-recovery

• Question 118:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have the following:

  1.

  A Microsoft 365 E5 tenant

  2.

  An on-premises Active Directory domain

  3.

  A hybrid Azure Active Directory (Azure AD) tenant

  4.

  An Azure Active Directory Domain Services (Azure AD DS) managed domain

  5.

  An Azure Virtual Desktop deployment

  The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.

  You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.

  Solution: You create and configure a Group Policy Object (GPO) in the on-premises domain.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://www.compete366.com/blog-posts/eight-tips-on-how-to-manage-azure-virtual-desktop-avd/

• Question 119:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have the following:

  1.

  A Microsoft 365 E5 tenant

  2.

  An on-premises Active Directory domain

  3.

  A hybrid Azure Active Directory (Azure AD) tenant

  4.

  An Azure Active Directory Domain Services (Azure AD DS) managed domain

  5.

  An Azure Virtual Desktop deployment

  The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.

  You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.

  Solution: You configure a configuration profile in Intune.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/azure-virtual-desktop

• Question 120:

  You have an Azure Virtual Desktop deployment.

  The session hosts are joined to an on-premises Active Directory domain named contoso.com.

  You need to limit user sessions to three hours.

  What should you configure?

  A. a Group Policy Object (GPO) in contoso.com.

  B. the properties of the workspace

  C. the RDP Properties of a host pool

  D. just-in-time (JIT) VM access

  Correct Answer: A

  Configure a Group Policy Object (GPO) and set the LimitSecondsToForceLogOffUser parameter to zero. This allows the session configuration setting in specified group policies to handle signing off user sessions.